Aikido Security is a platform for application security aimed at software developers. It combines static code analysis (SAST), scanning of open-source dependencies (SCA), detection of secrets in code and checks on cloud configurations. The Aikido Attack module adds AI-assisted penetration testing and dynamic application testing. The product is offered as a cloud service through a web application, where development teams review findings within their own workflow.
Aikido Security BV is headquartered in Ghent, Belgium. Its privacy policy states that it is based on the GDPR. Customer data is stored in databases operated by third parties in the United States and the European Union, and the policy does not name a specific data-centre region. For transfers outside the EEA, Aikido refers to standard contractual clauses and states that it enters into data processing agreements with its own vendors whenever feasible and appropriate. For a European organisation, this means an EU-based supplier with hosting in the United States, which should be reviewed in the processing agreement. The product is proprietary and not open source.